gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write
Published May 29, 2019
8.1
HIGHCVSS 3.0
EPSS 1.76%
Description
An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't implement query_info_on_read/write.
Affected products
No data.
No data.
Red Hat Enterprise Linux 8
LibRaw-0:0.19.5-1.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
LibRaw-0:0.19.5-1.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
accountsservice-0:0.6.50-8.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
accountsservice-0:0.6.50-8.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
appstream-data-0:8-20191129.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
appstream-data-0:8-20191129.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
baobab-0:3.28.0-4.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
baobab-0:3.28.0-4.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
clutter-0:1.26.2-8.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
clutter-0:1.26.2-8.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
evince-0:3.28.4-4.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
evince-0:3.28.4-4.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gdm-1:3.28.3-29.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gdm-1:3.28.3-29.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gjs-0:1.56.2-4.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gjs-0:1.56.2-4.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gnome-boxes-0:3.28.5-8.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gnome-boxes-0:3.28.5-8.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gnome-control-center-0:3.28.2-19.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gnome-control-center-0:3.28.2-19.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gnome-menus-0:3.13.3-11.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gnome-menus-0:3.13.3-11.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gnome-online-accounts-0:3.28.2-1.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gnome-online-accounts-0:3.28.2-1.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gnome-remote-desktop-0:0.1.6-8.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gnome-remote-desktop-0:0.1.6-8.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gnome-session-0:3.28.1-8.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gnome-session-0:3.28.1-8.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gnome-settings-daemon-0:3.32.0-9.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gnome-settings-daemon-0:3.32.0-9.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gnome-shell-0:3.32.2-14.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gnome-shell-0:3.32.2-14.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gnome-software-0:3.30.6-3.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gnome-software-0:3.30.6-3.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gnome-terminal-0:3.28.3-1.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gnome-terminal-0:3.28.3-1.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gnome-tweaks-0:3.28.1-7.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gnome-tweaks-0:3.28.1-7.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gsettings-desktop-schemas-0:3.32.0-4.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gsettings-desktop-schemas-0:3.32.0-4.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gtk3-0:3.22.30-5.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gtk3-0:3.22.30-5.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gvfs-0:1.36.2-8.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
gvfs-0:1.36.2-8.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
libvncserver-0:0.9.11-14.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
libvncserver-0:0.9.11-14.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
libxslt-0:1.1.32-4.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
libxslt-0:1.1.32-4.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
mozjs52-0:52.9.0-2.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
mozjs52-0:52.9.0-2.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
mozjs60-0:60.9.0-4.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
mozjs60-0:60.9.0-4.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
mutter-0:3.32.2-34.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
mutter-0:3.32.2-34.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
nautilus-0:3.28.1-12.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
nautilus-0:3.28.1-12.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
vala-0:0.40.19-1.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
vala-0:0.40.19-1.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
vinagre-0:3.22.0-21.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 8
vinagre-0:3.22.0-21.el8
Fixed · RHSA-2020:1766
Red Hat Enterprise Linux 6
gvfs
Not affected
Red Hat Enterprise Linux 7
gvfs
Will not fix
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 8 | LibRaw-0:0.19.5-1.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | LibRaw-0:0.19.5-1.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | accountsservice-0:0.6.50-8.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | accountsservice-0:0.6.50-8.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | appstream-data-0:8-20191129.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | appstream-data-0:8-20191129.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | baobab-0:3.28.0-4.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | baobab-0:3.28.0-4.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | clutter-0:1.26.2-8.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | clutter-0:1.26.2-8.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | evince-0:3.28.4-4.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | evince-0:3.28.4-4.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gdm-1:3.28.3-29.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gdm-1:3.28.3-29.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gjs-0:1.56.2-4.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gjs-0:1.56.2-4.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gnome-boxes-0:3.28.5-8.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gnome-boxes-0:3.28.5-8.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gnome-control-center-0:3.28.2-19.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gnome-control-center-0:3.28.2-19.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gnome-menus-0:3.13.3-11.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gnome-menus-0:3.13.3-11.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gnome-online-accounts-0:3.28.2-1.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gnome-online-accounts-0:3.28.2-1.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gnome-remote-desktop-0:0.1.6-8.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gnome-remote-desktop-0:0.1.6-8.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gnome-session-0:3.28.1-8.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gnome-session-0:3.28.1-8.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gnome-settings-daemon-0:3.32.0-9.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gnome-settings-daemon-0:3.32.0-9.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gnome-shell-0:3.32.2-14.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gnome-shell-0:3.32.2-14.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gnome-software-0:3.30.6-3.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gnome-software-0:3.30.6-3.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gnome-terminal-0:3.28.3-1.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gnome-terminal-0:3.28.3-1.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gnome-tweaks-0:3.28.1-7.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gnome-tweaks-0:3.28.1-7.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gsettings-desktop-schemas-0:3.32.0-4.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gsettings-desktop-schemas-0:3.32.0-4.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gtk3-0:3.22.30-5.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gtk3-0:3.22.30-5.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gvfs-0:1.36.2-8.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | gvfs-0:1.36.2-8.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | libvncserver-0:0.9.11-14.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | libvncserver-0:0.9.11-14.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | libxslt-0:1.1.32-4.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | libxslt-0:1.1.32-4.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | mozjs52-0:52.9.0-2.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | mozjs52-0:52.9.0-2.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | mozjs60-0:60.9.0-4.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | mozjs60-0:60.9.0-4.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | mutter-0:3.32.2-34.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | mutter-0:3.32.2-34.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | nautilus-0:3.28.1-12.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | nautilus-0:3.28.1-12.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | vala-0:0.40.19-1.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | vala-0:0.40.19-1.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | vinagre-0:3.22.0-21.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 8 | vinagre-0:3.22.0-21.el8 | Fixed | RHSA-2020:1766 |
| Red Hat Enterprise Linux 6 | gvfs | Not affected | n/a |
| Red Hat Enterprise Linux 7 | gvfs | Will not fix | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (11)
- http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html vendor-advisoryx_refsource_SUSE
- http://www.openwall.com/lists/oss-security/2019/07/09/3 mailing-listx_refsource_MLIST
- https://access.redhat.com/security/cve/CVE-2019-12448 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1728564 Issue Tracking
- https://gitlab.gnome.org/GNOME/gvfs/commit/764e9af7522e3096c0f44613c330377d31c9bbb5 x_refsource_MISC
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FP6BFQUPQRVRRFIYHFWWB6RHJNEB4LGQ/ vendor-advisoryx_refsource_FEDORA
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M2DQVOL5H5BVLXYCEB763DCIYJQ7ZUQ2/ vendor-advisoryx_refsource_FEDORA
- https://nvd.nist.gov/vuln/detail/CVE-2019-12448
- https://usn.ubuntu.com/4053-1/ vendor-advisoryx_refsource_UBUNTU
- https://www.cve.org/CVERecord?id=CVE-2019-12448
Change history (0)
No recorded changes yet.